Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e342e302f32332d3233203d3e20323632353337.roa
File:                     3137372e37322e342e302f32332d3233203d3e20323632353337.roa (raw, json)
Hash identifier:          a+hdcQVDervj4sMwGGvZPy0+YswNUxMdFcc/PHni1zI=
Subject key identifier:   7D:FB:BB:03:DF:E7:A2:75:24:8B:42:EF:4F:52:CC:66:0B:C7:E5:F2
Certificate issuer:       /CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
Certificate serial:       065AA2F2F7A4DA303699CBD1A249AA2A7947226E
Authority key identifier: 2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e342e302f32332d3233203d3e20323632353337.roa
Signing time:             Fri 06 Oct 2023 18:52:37 +0000
ROA not before:           Fri 06 Oct 2023 18:47:37 +0000
ROA not after:            Fri 04 Oct 2024 18:52:37 +0000
asID:                     262537
IP address blocks:        177.72.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5a:a2:f2:f7:a4:da:30:36:99:cb:d1:a2:49:aa:2a:79:47:22:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8490418D7254F06B90EC2FC14B1102C4A069AD
        Validity
            Not Before: Oct  6 18:47:37 2023 GMT
            Not After : Oct  4 18:52:37 2024 GMT
        Subject: CN=7DFBBB03DFE7A275248B42EF4F52CC660BC7E5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:fb:aa:9c:0d:c0:cb:aa:60:72:b9:5b:8b:
                    c5:c4:de:45:c5:ba:88:f4:12:83:64:65:c0:1f:57:
                    60:ff:d7:06:88:2a:e7:0c:51:2d:46:94:95:e8:04:
                    e1:4c:fb:f3:a6:4d:f2:29:5f:c3:5f:7a:0a:d6:10:
                    09:de:b5:bc:01:ba:f1:c6:d6:ce:a9:23:d4:1b:9b:
                    5d:82:2f:c0:db:37:13:7a:22:bf:e3:cf:3c:8f:2b:
                    19:7d:d9:e1:bd:4e:c8:3e:b3:e2:63:33:73:ec:7d:
                    e1:00:35:40:ba:61:85:be:93:e5:9b:66:84:54:09:
                    6b:30:b4:04:c8:54:bf:73:1b:f2:9a:75:a5:23:8f:
                    ec:cc:83:a7:b8:94:4d:c6:a4:6f:c8:ed:61:65:7b:
                    e4:17:1e:33:fa:6b:f2:75:89:9e:30:f4:f6:e7:26:
                    56:cd:9f:dd:f3:9a:67:0c:45:f6:73:56:b3:55:ff:
                    f4:ba:9c:05:c6:44:88:9b:27:6a:cd:61:42:43:63:
                    5c:e3:7c:10:85:4e:1a:33:d0:10:e9:95:76:dc:22:
                    85:ce:ec:23:6f:04:8a:58:19:03:d1:f3:29:68:25:
                    aa:ca:a1:40:19:6f:b6:70:25:05:b0:02:34:74:71:
                    d9:66:84:38:1a:5d:85:1f:a8:16:46:01:71:e6:ae:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FB:BB:03:DF:E7:A2:75:24:8B:42:EF:4F:52:CC:66:0B:C7:E5:F2
            X509v3 Authority Key Identifier:
                keyid:2E:84:90:41:8D:72:54:F0:6B:90:EC:2F:C1:4B:11:02:C4:A0:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E8490418D7254F06B90EC2FC14B1102C4A069AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dzWiTAiUb9G52z73jHFc7eSGrHoyWbqzkivTEwrMn39/0/3137372e37322e342e302f32332d3233203d3e20323632353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:4e:20:00:fb:2d:bc:f7:59:f3:00:3e:b1:bf:37:20:fe:6b:
         ff:fa:e8:eb:d0:52:e2:43:e1:71:b6:79:c9:13:16:33:c2:ec:
         2d:5c:15:3a:ee:a6:80:2a:1a:74:d5:2c:21:79:b9:2c:3d:9f:
         8f:e4:97:d6:fd:8b:a7:5d:1c:92:44:66:0e:d3:6b:79:ab:a7:
         d6:d0:77:0e:29:82:62:49:ea:56:9c:0d:37:96:17:a1:ed:9d:
         96:e4:c9:1a:fd:e5:a1:e6:87:4c:36:39:c5:e8:28:a2:11:34:
         39:ef:19:14:1d:3d:5a:a5:f2:32:89:d0:ec:a3:5d:c7:97:74:
         a7:d9:ee:4d:75:dc:d2:65:1d:61:9e:8b:b0:cc:97:6d:9a:38:
         30:35:22:4d:a5:b8:cb:fd:c4:f4:63:f8:c8:52:9c:cb:a3:63:
         46:eb:7d:5d:31:18:5b:0f:46:9d:e4:bf:60:93:cc:9b:84:6c:
         74:f6:88:0b:95:45:f6:ff:1d:ae:ca:03:35:de:98:d0:21:38:
         ae:37:2a:b0:92:55:41:af:9d:da:4f:16:5a:ae:cc:60:68:18:
         30:05:04:70:a2:f2:6d:ac:fb:21:6f:32:d1:a6:dc:bc:1f:2c:
         e2:98:25:40:a5:b3:99:82:bb:3a:a8:a8:4c:19:25:80:9b:14:
         e4:aa:c7:af
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUBlqi8vek2jA2mcvRokmqKnlHIm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4NDkwNDE4RDcyNTRGMDZCOTBFQzJGQzE0QjExMDJD
NEEwNjlBRDAeFw0yMzEwMDYxODQ3MzdaFw0yNDEwMDQxODUyMzdaMDMxMTAvBgNV
BAMTKDdERkJCQjAzREZFN0EyNzUyNDhCNDJFRjRGNTJDQzY2MEJDN0U1RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YvuqnA3Ay6pgcrlbi8XE3kXF
uoj0EoNkZcAfV2D/1waIKucMUS1GlJXoBOFM+/OmTfIpX8NfegrWEAnetbwBuvHG
1s6pI9Qbm12CL8DbNxN6Ir/jzzyPKxl92eG9Tsg+s+JjM3PsfeEANUC6YYW+k+Wb
ZoRUCWswtATIVL9zG/KadaUjj+zMg6e4lE3GpG/I7WFle+QXHjP6a/J1iZ4w9Pbn
JlbNn93zmmcMRfZzVrNV//S6nAXGRIibJ2rNYUJDY1zjfBCFThoz0BDplXbcIoXO
7CNvBIpYGQPR8yloJarKoUAZb7ZwJQWwAjR0cdlmhDgaXYUfqBZGAXHmriSFAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUffu7A9/nonUki0LvT1LMZgvH5fIwHwYDVR0j
BBgwFoAULoSQQY1yVPBrkOwvwUsRAsSgaa0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9keldpVEFpVWI5RzUyejczakhGYzdlU0dySG95V2JxemtpdlRFd3JNbjM5
LzAvMkU4NDkwNDE4RDcyNTRGMDZCOTBFQzJGQzE0QjExMDJDNEEwNjlBRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8yRTg0OTA0MThENzI1NEYwNkI5
MEVDMkZDMTRCMTEwMkM0QTA2OUFELmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9k
eldpVEFpVWI5RzUyejczakhGYzdlU0dySG95V2JxemtpdlRFd3JNbjM5LzAvMzEz
NzM3MmUzNzMyMmUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM1MzMz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbFIBDANBgkqhkiG9w0BAQsFAAOCAQEAak4gAPstvPdZ8wA+
sb83IP5r//ro69BS4kPhcbZ5yRMWM8LsLVwVOu6mgCoadNUsIXm5LD2fj+SX1v2L
p10ckkRmDtNreaun1tB3DimCYknqVpwNN5YXoe2dluTJGv3loeaHTDY5xegoohE0
Oe8ZFB09WqXyMonQ7KNdx5d0p9nuTXXc0mUdYZ6LsMyXbZo4MDUiTaW4y/3E9GP4
yFKcy6NjRut9XTEYWw9GneS/YJPMm4RsdPaIC5VF9v8drsoDNd6Y0CE4rjcqsJJV
Qa+d2k8WWq7MYGgYMAUEcKLybaz7IW8y0abcvB8s4pglQKWzmYK7OqioTBklgJsU
5KrHrw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org